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REMARKS 

Please reconsider the application in view of the above amendments and the following 
remarks. Applicant thanks the Examiner for carefully considering this application. 

Amendments to the Specification 

The specification was objected to by the examiner. On page 8, line 15, "mergiing" has 
been changed to "merging". Accordingly, withdrawal of this objection is respectfully requested. 

Disposition of Claims 

Claims 1- 18 are pending in this application. Claims 1, 9, and 17 are independent. The 
remaining claims depend, directly or indirectly, from claims 1, 9, and 17. Independent claims 1, 9, 
and 17 have been amended to include the limitations from cancelled claims 6, 13, and 18 
respectively. Applicant asserts that no new subject matter has been added by way of this 
amendment. 

Rejections under 35 U.S.C. § 102(b) 

Claims 1-18 stand rejected under 35 U.S.C. § 1 02(b) as being anticipated by U.S. Patent 
No. 5,687,235 ("Perlman"). To the extent that the rejection still applies, the rejection is respectfully 
traversed. 

For anticipation under 35 U.S.C. § 102, the reference must teach every aspect of the 
claimed invention either explicitly or impliedly. Any feature not directly taught must be inherently 
present. Regarding the rejection of amended claims 1 and 9, Examiner asserts that Perlman teaches 
a method for merging data from a plurality of CRLs spanning from the latest owned CRL to a 
current CRL. Applicant respectfully disagrees. Perlman teaches a method whereby the server 
submits a timestamp to a revocation service (RS). The RS then queries the CRL database to find all 
entries that exist after that timestamp. (See, e.g., Perlman col. 8 11. 56-67; col. 9 11. 1-10). As a 
result of the query, a single file is created that contains the changes made between the current CRL 
and the CRL of the server. As there is only one such file that is created, and manipulated, Perlman 
does not teach merging a plurality of delta CRLs. 
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Also, while Perlman discloses a method for sending incremental changes made to the 
CRL, upon receiving these changes, "the server node continually appends the contents of each 
successive incremental CRL to attain the current CRL." (See, e.g., Perlman col. 9 11. 26-28). As 
appending the incremental changes are appended to the CRL on a continual basis, it does not teach 
merging a plurality of delta CRLs. A merging process is done at a single moment in time; it is not a 
continuous process. 

Additionally, the Examiner cited claim 1 1 of Perlman in order to support the rejection. 
Claim 1 1 discusses merging the optimal CRL with the outdated CRL that currently exists in the 
server. An outdated CRL is not a delta CRL as asserted by the Examiner. Specifically, the outdated 
CRL contains all of the unexpired certificates that should not be honored up to "a latest certificate 
revocation date of the certificates included in the CRL presently retained by the server node." (See, 
e.g., Perlman col. 3 11. 40- 45). Therefore, merging the outdated CRL with an optimal CRL results 
in a CRL that contains all of the unexpired certificates that should not be honored as opposed to a 
CRL (i.e., a delta CRL) that reflects changes made between two CRLs (See, e.g., Instant 
Specification p. 5 11. 1-2). Thus, Perlman does not explicitly or impliedly disclose a method for 
merging a plurality of delta CRLs, as asserted by the examiner. 

In view of the above, Perlman does not support the rejection of amended claims 1 and 9. 
Accordingly, dependent claims 2-5, 7, 8, 10-12, and 14-16 are allowable for at least the same 
reasons. A withdrawal of this rejection is respectfully requested. 

Regarding the rejection of amended claim 17, the Examiner asserts that Perlman 
discloses a CRL identifier comprising a sequentially assigned number by citing Perlman column 3, 
lines 45-48. The Applicant respectfully disagrees. Column 3 lines 45-48 states, "[significantly, the 
RS generates an optimal CRL for its reply that contains all, part, or none of the current CRL revoked 
certificate serial numbers." (See Perlman col. 3, 11. 45-48). As the words "serial numbers" is 
modified by the word "certificate" and not "the current CRL", the unique identifier Perlman 
discloses is associated with the certificate, not the CRL. Subsequently, Perlman does not teach or 
suggest using a sequentially assigned number associated with the CRL. 
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Moreover, in order to determine the latest stored CRL of a server, Perlman relies on the 



use of timestamps associated with the certificates. Specifically, one of the parameters for 
determining the optimal CRL as defined by Perlman is the timestamp of the last revoked certificate 
in the CRL that the server node stores. (See, e.g., Perlman col. 7, 11. 25-30). The database must then 
be queried to determine all of the entries that have a later timestamp. (See, e.g., Perlman col. 8, 11. 
60-67). If Perlman used a sequentially assigned number associated with the CRL, which Perlman 
does not, then Perlman would merely have to compare the version number stored with the CRL with 
the version stored in the database. Thus, Perlman does not teach or suggest using a sequentially 
assigned number associated with the CRL. 

In view of the above, Perlman does not support the rejection of amended claim 17. A 
withdrawal of this rejection is respectfully requested. 

Conclusion 

Applicant believes this reply is fully responsive to all outstanding issues and places this 
application in condition for allowance. If this belief is incorrect, or other issues arise, the Examiner 
is encouraged to contact the undersigned or his associates at the telephone number listed below. 
Please apply any charges not covered, or any credits, to Deposit Account 50-0591 (Reference 
Number 03226/534001). 



Dated: March 31, 2005 



Respectfully submitted. 




Robert P. Lord 
Registration No.: 46,479 
(713) 228-8600 
(713) 228-8778 (Fax) 
Attorney for Applicant 
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